regcreateval "(default)"? (was Re: ILOVEYOU version 2.0 ..)

[Luke Kenneth Casson Leighton]

hm, don't know, will take a look-see some day.

On Sat, 20 May 2000, Peter Samuelson wrote:

> 
>   [Peter Samuelson <peter at cadcamlab.org>]
> > > Does that sound too drastic?  Any better ideas?  I am *really*
> > > getting tired of this stuff.
> 
> [Michael H. Warfield <mhw at wittsend.com>]
> > Not drastic enough...  If you find one, raise hell...  This one
> > destroys systems by zeroing out all the files that it finds that are
> > not in use.
> 
> Yeah.  Haven't seen it so far.  But I *have* discovered something this
> morning, or rather I have failed to discover something.
> 
> How to create the default value for a registry key.  Remotely.
> 
> - NT REGEDT32.EXE won't go near a remote hkey_classes_root.
> - NT REGEDIT.EXE pleads lack of permission to add values.
> - TNG rpcclient ... well, it can add keys and values just fine, but I
>   can't get it to add the *default* value for a key.
> 
> The issue is that I went through and deleted everyone's reg key:
> 
>   hkey_classes_root\.VBS
> 
> which I now can't recreate for the machines I want to, because it's
> supposed to have a default value of "VBScript".
> 
> In REGEDIT.EXE this shows up as the value named "(default)".  If you
> export to a .REG file it is represented by "@".
> 
> Luke?  Anyone?  Is there a way to do this in rpcclient?  It's not
> urgent or anything, just annoying.
> 
> Peter
> 

<a href=" mailto:lkcl at samba.org" > Luke Kenneth Casson Leighton    </a>
<a href=" http://cb1.com/~lkcl"  > Samba and Network Development   </a>
<a href=" http://samba.org"      > Samba Web site                  </a>
<a href=" http://mcp.com"        > Macmillan Technical Publishing  </a>
 
ISBN1578701503 DCE/RPC over SMB: Samba and Windows NT Domain Internals